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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Previously Presented) A method of controlling security of data in a 
storage system having a local disk system and a remote disk system comprising: 

in the local disk system: 

when a write of data is to be made to the local disk system retrieving a previously 
stored encryption key; 

encrypting the data; 

transferring the data to the remote disk system; then 
in the remote disk system: 

determining whether the data is to be stored in an encrypted form; 

determining an address for storage of the data in the remote disk system; 

if the data is to be stored in a decrypted form, decrypting and writing the data in 
the remote disk system; 

if the data is to be stored in an encrypted form, writing the data in the remote disk 
system without decrypting the data; and 

notifying the local disk system that the step of writing the data is complete, 

wherein the local disk system is coupled to a host computer to allow the host 
computer to access data stored in the local disk system. 

2. (Previously Presented) A method as in claim 1 further comprising a step 
of maintaining an encryption control table on the local disk system, the encryption control table 
including a list of encryption keys for selected volumes of the local and the remote disk system, 

wherein the data transfer between the local disk system and the remote disk 
system occurring via a communication link that couples the local disk system to the remote disk 
system, so that the local disk system may send the data to the remote disk system without direct 
involvement from the host computer 
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wherein a first key is assigned to a first set of volumes in the local disk system, 
and a second key is assigned to a second set of volumes in the local disk system, each of the first 
and second set of volumes including one or more volumes. 

3. (Original) A method as in claim 2 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the local disk 
system. 

4. (Original) A method as in claim 2 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the remote disk 
system. 

5. (Original) A method as in claim 3 wherein the encryption key is 
applicable to less than all of the storage on the local disk system. 

6. (Original) A method as in claim 4 wherein the encryption key is 
applicable to less than all of the storage on the remote disk system. 

7. (Original) A method as in claim 3 wherein the encryption key is 
applicable to at least one disk on the local disk system. 

8. (Original) A method as in claim 7 wherein the encryption key is 
applicable to at least one disk on the remote disk system. 

9. (Previously Presented) A method for changing an encryption key while 
operating a storage system having a local disk system and a remote disk system comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

in the local disk system determining a boundary for use of the encryption key; 

in the remote disk system receiving the boundary from the local disk system; 

in both the local and the remote disk system, determining a relationship of present 
operations to the boundary; 

in both the local and the remote disk system waiting for the boundary, and then 
changing the encryption key for data stored thereafter. 
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10. (Original) A method as in claim 9 wherein operations before the boundary 
are performed using a first encryption key and operations after the boundary are performed using 
a second encryption key. 

1 1 . (Original) A method as in claim 9 wherein the boundary is defined by 
counting input/output operations and using the count to define the boundary. 

12. (Previously Presented) A method for changing an encryption key while 
operating a storage system having a local disk system and a remote disk system, the method 
comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

issuing split request from the local disk system to the remote disk system to allow 
them to operate independently; 

using a new encryption key to begin storing data in the local disk system after 
issuing the split request; 

using a new encryption key to begin storing data in the remote disk system after 
receiving the split request; and 

resynchronize the local disk system and the remote disk system. 

13. (Previously Presented) A method of controlling encryption in a storage 
system having a local disk system and a remote disk system comprising: 

maintaining a control table in each of the local disk system and the remote disk 

system; 

determining a boundary in the local disk system where encryption is to be 
switched to an opposite state; 

in the remote disk system receiving a corresponding boundary from the remote 

disk system; 

in both the local and the remote disk system, determining a relationship of present 
operations to the boundary; 
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in both the local and the remote disk system waiting for the boundary, and then 
changing the switching the encryption to the opposite state. 

14. (Original) A method as in claim 13 wherein operations before the 
boundary are either encrypted or not encrypted, and operations performed after the boundary are 
either not encrypted or encrypted oppositely to those operations performed before the boundary. 

15. (Original) A method as in claim 14 wherein the boundary is defined by 
counting input/output operations and using the count to define the boundary. 

16. (Previously Presented) A method of controlling encryption in a storage 
system having a local disk system and a remote disk system comprising: 

storing an encryption key in a memory in the local disk system; 
transmitting the encryption key to the remote disk system and storing it in a 

memory there; 

splitting the local disk system from the remote disk system to allow them to 
operate independently; 

switching encryption to an opposite state from a previous state after splitting the 
local disk system and remote disk system; and 

re-synchronizing the local disk system and the remote disk system. 

17. (Previously Presented) A storage system comprising: 

a local disk system including a plurality of volumes of media for storing data, said 
local disk system being coupled to a host computer to enable the host computer to access said 
volumes; 

a remote disk system including a plurality of volumes of media for storing data; 

and 

a communications link coupling the local system to the remote system, 

wherein the local disk system determines whether encryption is to be employed in 

the data on the local disk system, and if so, encrypts the date to be transferred to the remote disk 

system, and 
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wherein the remote disk system determines whether to store the data in either 
encrypted form or unencrypted form and stores the data in that form in the remote disk system, 
and notifies the local disk system that the data has been stored. 

18. (Original) A system as in claim 17 further comprising an encryption 
control table stored on the local disk system, the encryption control table including a list of 
encryption keys for selected volumes of the local system and the remote system. 

19. (Original) A system as in claim 18 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the local system. 

20. (Original) A system as in claim 19 wherein the list of encryption keys 
further includes information relating to the use and non-use of encryption on the remote system. 

21. (Original) A system as in claim 20 wherein the encryption key is 
applicable to less than all of the storage on the local system. 

22. (Original) A system as in claim 21 wherein the encryption key is 
applicable to less than all of the storage on the remote system. 

23. (Previously Presented) A storage system having changeable encryption 
keys, comprising: 

a local disk system; 

a remote disk system; and 

a communications link connecting the local disk system to the remote disk system 
for transmitting the encryption key from the local disk system to the remote disk system, 

wherein the local disk system determines a boundary for use of the encryption 

key; and 

wherein the remote disk system receives the boundary from the local disk system; 

and 

wherein both the local and the remote disk system, determine a relationship of 
present operations to the boundary, and change the encryption key for operations occurring after 
the boundary. 

24. (Canceled). 
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25. (Canceled). 

26. (Previously Presented) A system for controlling encryption in a storage 
system having a local system and a remote system comprising: 

a local memory storing an encryption key in the local system; 

a communications link for transmitting the encryption key to the remote disk 
system and storing it in a remote memory there; 

a first computer program for splitting the local system from the remote system to 
allow them to operate independently; 

a switch for changing encryption to an opposite state from a previous state after 
splitting in the local disk system and remote disk system; and 

a second computer program for re-synchronizing the local system and the remote 

system. 

27. (Previously Presented) A method of controlling security of data in a 
storage system having a local disk system and a remote disk system comprising: 

in the local disk system: 

receiving a data update request from a host computer connected to the local disk 
system wherein said data update request includes a location of a fist portion of the local disk 
system; 

assigning a key to the first portion of the local disk system; 
encrypting the data stored in the first portion of the local disk system; 
transferring the encrypted data to the remote disk system; then 
in the remote disk system: 
decrypting the data using the assigned key; and 

writing the decrypted data into a second portion of the remote disk system. 

28. (Original) A method as in claim 27 wherein the first portion comprises at 
least a volume of the local storage system and the second portion comprises at least a volume of 
the remote disk system. 
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29. (Original) A method as in claim 28 wherein the first portion comprises a 
group of volumes of the local storage system, and the second portion comprises a group of 
volumes of the remote storage system. 

30. (Previously Presented) A storage system comprising: 

a local disk system including a plurality of volumes of media for storing datat, 
wherein the local disk system is connected to a host computer; 

a remote disk system including a plurality of volumes of media also for storing 

data; 

a communications link coupling the local disk system to the remote disk system, 
wherein the local disk system retrieves selected data from one of the volumes on 

the local system, encrypts that selected data using an encryption key, and transmits the encrypted 

selected data to the remote disk system, and 

wherein the remote disk system decrypts the selected data received from the 

communications link and stores that selected data in unencrypted form in one of the volumes of 

media the remote system. 

3 1 . (Original) A system as in claim 30 further comprising an encryption 
control table stored on the local disk system, the encryption control table including a list of 
encryption keys for selected volumes of the local system and the remote system. 
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